Skip to content
Apple Patches CoreGraphics Vulnerability in Older iPhones

Apple Patches CoreGraphics Vulnerability in Older iPhones

First seen 1 Nov 2026, 14:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 1, 2026 at 16:15 UTC
  • •Apple's iOS 18.7.11 fixes three vulnerabilities, including a critical CoreGraphics flaw.
  • •CVE-2026-86950 may have been exploited in targeted attacks against specific individuals.
  • •The update is essential for older iPhone models that cannot upgrade to newer iOS versions.

Apple released iOS 18.7.11 on October 26, 2026, to address three vulnerabilities, including CVE-2026-86950, a flaw in CoreGraphics. This vulnerability allows arbitrary code execution and may have been exploited in targeted attacks against specific individuals. The update is crucial for users of older devices like the iPhone XS, XS Max, and XR, which cannot upgrade to newer iOS versions. Alongside the CoreGraphics flaw, the update also addresses CVE-2026-65339, which risks data leaks, and CVE-2026-86990, which allows unauthorized camera access. Apple has not disclosed the identities of the targeted individuals or the scale of the attacks. Users are urged to update their devices immediately to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-02-11
CVE-2026-20700 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-17
CVE-2026-65339 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-28
CVE-2026-86950 published
A critical CoreGraphics vulnerability allowing arbitrary code execution was disclosed.
Apple.Gadgethacks
2026-10-26
iOS 18.7.11 released
Apple released a security update for older iPhones and iPads, fixing three vulnerabilities.
Vietnam.Vn
2026-10-29
CVE-2026-86990 published
A vulnerability in CoreMedia was disclosed, allowing unauthorized camera access.
Malwarebytes

More articles in this cluster (6)

Following this threat?

Track CVE-2026-20700 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3

Common questions

Which devices need the update?
The update is for iPhone XS, XS Max, XR, and certain iPads that cannot upgrade to iOS 27.
How urgent is this update?
It is critical due to the potential exploitation of the CoreGraphics vulnerability in targeted attacks.
What are the steps to update my device?
Go to Settings > General > Software Update and install iOS 18.7.11 as soon as it appears.